Comment

Comment on Docker Hub limiting unauthenticated users to 10 pulls per hour

Well shit, I still rely on Docker Hub even for automated pulls so this is just great. I guess i’m going back to managing VMs with OpenTofu and package managers.

source

Sort:hotnew top

wireless_purposely832@lemmy.world ⁨1⁩ ⁨week⁩ ago
The issue isn’t Docker vs Podman vs k8s vs LXC vs others. They all use OCI images to create your container/pod/etc. This new limit impacts all containerization solutions, not just Docker.

Instead, the issue is Docker Hub vs Quay vs GHCR vs others. It’s about where the OCI images are stored and pulled from. If the project maintainer hosts the OCI images on Docker Hub, then you will be impacted by this regardless of how you use the OCI images.

Some options include:

For projects that do not store images on Docker Hub, continue using the images as normal

Become a paid Docker member to avoid this limit

When a project uses multiple container registries, use one that is not Docker Hub

For projects that have community or 3rd party maintained images on registries other than Docker Hub, use the community or 3rd party maintained images

For projects that are open source and/or have instructions on building OCI images, build the images locally and bypass the need for a container registry

For projects you control, store your images on other image registries instead of (or in addition to) Docker Hub

Use an image tag that is updated less frequently

Rotate the order of pulled images from Docker Hub so that each image has an opportunity to update

Pull images from Docker Hub less frequently

For images that are used by multiple users/machine under your supervision, create an image cache or image registry of images that will be used by your users/machines to mitigate the number of pulls from Docker Hub

Encourage project maintainers to store images on image registries other than Docker Hub (or at least provide additional options beyond Docker Hub)

Do not use OCI images and either use VM or bare metal installations

Use alternative software solutions that store images on registries other than Docker Hub
source
- interdimensionalmeme@lemmy.ml ⁨1⁩ ⁨week⁩ ago
  Lxc doesn’t use oci images? I always end up using docker in lxc when dockeris the only option (which I have not figured how to makw work on my airgapped side
  
  source
  - wireless_purposely832@lemmy.world ⁨1⁩ ⁨week⁩ ago
    Ah, you’re right. I’ll edit my comment.
    
    incus may be an option for you though. It supports both LXC/LXD and OCI (although not nearly as well as Docker/Podman/Kubernetes - I don’t think it supports any compose files).
    
    source
  - shertson@mastodon.world ⁨1⁩ ⁨week⁩ ago
    @interdimensionalmeme @wireless_purposely832
    I believe Graber did a talk at FOSDEM this year about using OCI images in Incus.
    source